tocsin

CVE-2020-29662

2 advisories.

Go/github.com/goharbor/harbor CVE-2020-29662: medium 5.3, EPSS 0.72%

"catalog's registry v2 api exposed on unauthenticated path in Harbor"

Action: Upgrade github.com/goharbor/harbor to 2.0.5 or later.

go get github.com/goharbor/harbor@v2.0.5
go get github.com/goharbor/harbor@v2.1.2

Affected

introducedfixedlast affected
02.0.5-
2.1.02.1.2-

Fixed versions

2.0.52.1.2

Sources

CVE-2020-29662 · published · modified · JSON

Go/github.com/goharbor/harbor CVE-2020-29662: unknown, EPSS 0.72%

"catalog's registry v2 api exposed on unauthenticated path in Harbor" in github.com/goharbor/harbor

Action: Upgrade github.com/goharbor/harbor to 2.0.5+incompatible or later.

go get github.com/goharbor/harbor@v2.0.5+incompatible
go get github.com/goharbor/harbor@v2.1.2+incompatible

Affected

introducedfixedlast affected
02.0.5+incompatible-
2.1.0+incompatible2.1.2+incompatible-

Fixed versions

2.0.5+incompatible2.1.2+incompatible

Sources

CVE-2020-29662 · published · modified · JSON